Bonjour, J'ai depuis quelques jours des fenetres intempestives Drive cleaner ou Winantivirus 2006 ou sytem doctor. J'ai procéder aux actions préliminaires ( CCleaner: Netoyages et Registre, AVG spy-wares , Bitdefender Onligne Scan, et Hijackthis) J'ai trouvers quelques logiciels espions et je les ai suprimés mais les fenetres réaparesses moins mais toujours. J'ai tous les rapports de scan. AVG spy-ware : --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 17:15:23 28/05/2007 + Résultat de l'analyse: HKLM\SYSTEM\ControlSet002\Enum\HID\Vid_046d&Pid_c016\6&1fd12af&0&0000\LogConf -> Adware.PurityScan : Aucune action entreprise. Fin du rapport Bitdefender Onligne scan: C:\Documents and Settings\Claude\Application Data\Thunderbird\Profiles\b8t427xf.default\Mail\Local Folders\Inbox=>(message 1380) Infected with: Win32.Bagle.GS@mm C:\Documents and Settings\Claude\Application Data\Thunderbird\Profiles\b8t427xf.default\Mail\Local Folders\Inbox=>(message 1380) Disinfection failed C:\Documents and Settings\Claude\Application Data\Thunderbird\Profiles\b8t427xf.default\Mail\Local Folders\Inbox=>(message 1380) Deleted C:\Documents and Settings\Claude\Application Data\Thunderbird\Profiles\b8t427xf.default\Mail\Local Folders\Inbox Updated C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036357.dll Infected with: MemScan:Trojan.Virtumod.ALX C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036357.dll Disinfection failed C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036357.dll Deleted C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036358.dll Infected with: MemScan:Trojan.Virtumod.ALX C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036358.dll Disinfection failed C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036358.dll Deleted C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036359.dll Infected with: MemScan:Trojan.Virtumod.ALX C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036359.dll Disinfection failed C:\System Volume Information\_restore{EA39A09C-50BA-4996-869B-915C83FE3B53}\RP119\A0036359.dll Deleted C:\WINDOWS\system32\bsbobbab.dll Infected with: Trojan.Virtumod.ALZ C:\WINDOWS\system32\bsbobbab.dll Disinfection failed C:\WINDOWS\system32\bsbobbab.dll Delete failed C:\WINDOWS\system32\fccccbb.dll Infected with: MemScan:Trojan.Virtumonde.IC C:\WINDOWS\system32\fccccbb.dll Disinfection failed C:\WINDOWS\system32\fccccbb.dll Deleted C:\WINDOWS\system32\iiffcdc.dll Infected with: MemScan:Trojan.Virtumonde.IC C:\WINDOWS\system32\iiffcdc.dll Disinfection failed C:\WINDOWS\system32\iiffcdc.dll Delete failed C:\WINDOWS\system32\jkhfd.dll Infected with: MemScan:Trojan.Virtumod.ALX C:\WINDOWS\system32\jkhfd.dll Disinfection failed C:\WINDOWS\system32\jkhfd.dll Delete failed C:\WINDOWS\system32\kduqv.exe Infected with: Trojan.Peed.Gen C:\WINDOWS\system32\kduqv.exe Disinfection failed C:\WINDOWS\system32\kduqv.exe Deleted C:\WINDOWS\system32\mljghhf.dll Infected with: MemScan:Trojan.Virtumonde.IC C:\WINDOWS\system32\mljghhf.dll Disinfection failed C:\WINDOWS\system32\mljghhf.dll Deleted C:\WINDOWS\system32\mlljh.dll Infected with: MemScan:Trojan.Virtumod.ALX C:\WINDOWS\system32\mlljh.dll Disinfection failed C:\WINDOWS\system32\mlljh.dll Deleted C:\WINDOWS\system32\opnkihe.dll Infected with: MemScan:Trojan.Virtumonde.IC C:\WINDOWS\system32\opnkihe.dll Disinfection failed C:\WINDOWS\system32\opnkihe.dll Deleted C:\WINDOWS\system32\qehyryuu.dll Infected with: Trojan.Vundo.AY C:\WINDOWS\system32\qehyryuu.dll Disinfection failed C:\WINDOWS\system32\qehyryuu.dll Delete failed C:\WINDOWS\system32\qomligh.dll Infected with: MemScan:Trojan.Virtumonde.IC C:\WINDOWS\system32\qomligh.dll Disinfection failed C:\WINDOWS\system32\qomligh.dll Deleted Hijackthis : ogfile of HijackThis v1.99.1 Scan saved at 17:02:31, on 28/05/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\VideoLAN\VLC\vlc.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/ R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.dell.com/fr-fr R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing) R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing) O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing) O2 - BHO: (no name) - {43342018-0891-4966-B4AA-6EC886F6426f} - C:\WINDOWS\system32\fcbfpjlc.dll O2 - BHO: (no name) - {4B646AFB-9341-4330-8FD1-C32485AEE619} - C:\WINDOWS\system32\bsbobbab.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {9BCB6A7E-F9AE-4B2C-AA15-2A43380BD175} - C:\WINDOWS\system32\iiffcdc.dll O2 - BHO: (no name) - {E50F650E-F4B1-43B9-BEA0-711212933E00} - C:\WINDOWS\system32\jkhfd.dll O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\qehyryuu.dll",realset O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Configuration de votre Livebox.lnk = ? O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IP-Uploader Control) - http://asp08.photoprintit.de/microsite/1156/defaults/activex/ImageUploader3.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: iiffcdc - C:\WINDOWS\SYSTEM32\iiffcdc.dll O20 - Winlogon Notify: jkhfd - C:\WINDOWS\system32\jkhfd.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\ O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\WINDOWS\System32\FTRTSVC.exe (file missing) O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: VideoAcceleratorEngine - Unknown owner - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe Voila, je crois ke c'est le rapport d' Hijackthis qui est important ici . Merci d'avance de m'aider à résoudre ce probleme. a bientot

Drive Cleaner, Winantivirus 2006, system doct - Page 2

1
2

Réponse 21 / 22

Claude

Pour le moment aucunes fenetres intempestives, je verrais bien. Je te remercie énormément pour ton aide. Je croi que le probleme est résolu. Encore une foi : MERCI !!!

Réponse 22 / 22

Utilisateur anonyme

Le tout, est d'être bien protégé et de ne pas accumuler les truc inutiles.
https://leblogdeclaude.blogspot.com/2007/05/derniers-conseils.html

1
2

Discussions similaires

Rétrodiffusion "Mail Delivery System"

Forum Antivirus

Trouvez des recommandations pour protéger votre ordinateur, des astuces pour éliminer les menaces en ligne, et discutez des dernières avancées en matière de sécurité informatique.

Newsletters

Actu du jour

Voir un exemple